[ovirt-users] How to protect SHE VM from being deleted in following setup

[Vrgotic, Marko]

Dear Michal,

Your reply pushed me into learning more about how permission sets apply and I have managed to protect the SHE.

Thank you, feeling better already.


Kind regards
--
Marko Vrgotic

From: "Vrgotic, Marko" <M.Vrgotic at activevideo.com>
Date: Monday, 19 February 2018 at 09:49
To: Michal Skrivanek <michal.skrivanek at redhat.com>
Cc: users <users at ovirt.org>
Subject: Re: [ovirt-users] How to protect SHE VM from being deleted in following setup

Hi Michal,

This is exactly what I would expect to achieve by default, if creating regular user.

However, these users are allowed Admin access, and therefore, I have created “very” limited accounts, so that they can Create,Manipulate,Delete VMs, but I do not see how and where I can set that this is allowed only for VMs they own.

Here are the screenshots of the Role “AWS VM Operator” I created for them:
[cid:image001.png at 01D3A966.FB0232E0]
[cid:image002.png at 01D3A966.FB0232E0]
[cid:image003.png at 01D3A966.FB0232E0]

Following one actually contains what they are allowed to:

[cid:image004.png at 01D3A966.FB0232E0]

What am I missing?

Kindly awaiting your reply.

Marko


From: Michal Skrivanek <michal.skrivanek at redhat.com>
Date: Sunday, 18 February 2018 at 15:23
To: "Vrgotic, Marko" <M.Vrgotic at activevideo.com>
Cc: users <users at ovirt.org>
Subject: Re: [ovirt-users] How to protect SHE VM from being deleted in following setup

Why do you give them permissions to HE VM? You should be able to give them creation, but not let them delete VMs they do not own
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20180227/8f02f49b/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 53502 bytes
Desc: image001.png
URL: <http://lists.ovirt.org/pipermail/users/attachments/20180227/8f02f49b/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 41790 bytes
Desc: image002.png
URL: <http://lists.ovirt.org/pipermail/users/attachments/20180227/8f02f49b/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 13485 bytes
Desc: image003.png
URL: <http://lists.ovirt.org/pipermail/users/attachments/20180227/8f02f49b/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 26560 bytes
Desc: image004.png
URL: <http://lists.ovirt.org/pipermail/users/attachments/20180227/8f02f49b/attachment-0003.png>